Control · preventive

Output validation and guardrails

Deterministic schema validation and sanitisation of AI-generated output before it reaches any downstream system.

Schema-validates and sanitises AI-generated output deterministically before it reaches any downstream system or user.

The output-side counterpart to input validation — treats model output as untrusted until proven otherwise.

Coverage

Risks this mitigates

The risks this control addresses, ranked by effectiveness.

Attacker-controlled input overrides system instructions, either directly or via retrieved/tool content treated as trusted.

A model surfaces training, fine-tuning, or retrieval-sourced sensitive data in its output.